CVE-2001-0736: Low severity Immunix Immunix vulnerability
Published Oct 12, 2001
·Updated
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.
Affected Software
12 affected components
Immunix Immunix=6.2
Immunix Immunix=7.0
Immunix Immunix=7.0_beta
University of Washington pine<=4.33
Engardelinux Secure Linux=1.0.1
Mandrakesoft Mandrake Linux=7.1
Mandrakesoft Mandrake Linux=7.2
Mandrakesoft Mandrake Linux=8.0
Mandrakesoft Mandrake Linux Corporate Server=1.0.1
redhat Linux=5.2
redhat Linux=6.2
redhat Linux=7.0
Remediation
Patch Available
Event History
Oct 12, 2001
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0736?
CVE-2001-0736 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2001-0736?
To fix CVE-2001-0736, upgrade to a patched version of pine or pico that addresses the symlink issue.
3
Which versions of pine are affected by CVE-2001-0736?
All versions of pine prior to 4.33 are affected by CVE-2001-0736.
4
How does CVE-2001-0736 allow file overwriting?
CVE-2001-0736 allows local users to overwrite arbitrary files using a symlink attack due to improper handling of symlinks.
5
Which operating systems are affected by CVE-2001-0736?
CVE-2001-0736 affects various versions of Immunix, Mandrake Linux, and Red Hat Linux that ship with vulnerable versions of pine.